Platform Security

Crypora takes the security of your account and personal data seriously. This page describes the technical and organisational measures we use to protect your information. We do not custody cryptocurrency funds — your private keys and exchange assets remain entirely under your control.

• All user accounts are protected by secure email-verified login.
• Passwords are never stored in plaintext — we use industry-standard hashed credential storage via our authentication provider.
• Session tokens are short-lived and rotated on each login.
• We support email verification for all new accounts.
• Admin access requires separate elevated credentials with audit logging.

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS enforced).
• Sensitive database fields are encrypted at rest.
• API keys you optionally provide for exchange connectivity are stored encrypted and never logged.

Crypora is an analytics and education platform. We do not hold, manage, or have access to your cryptocurrency or exchange balances. If you optionally connect an exchange API key for auto-trading features, those keys are stored encrypted, you can revoke them at any time from your profile, and you control the permissions granted to those keys at the exchange level. We recommend using read-only or trade-only keys with withdrawal permissions explicitly disabled.

• Platform runs on hardened cloud infrastructure with automated security patches.
• Network access to backend services is restricted by firewall rules and private networking.
• Rate limiting and abuse protection is applied to all public API endpoints.
• System logs are monitored for anomalous access patterns.

If you discover a security vulnerability in our platform, please report it responsibly by emailing security@growwithyouu.com. We ask that you do not publicly disclose the vulnerability before giving us reasonable time to investigate and remediate. We take all reports seriously and will respond within 5 business days.